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Abstract 

In this paper the fading multiple antenna (MIMO) wire-tap channel is investigated under short term power 
constraints. The secret diversity gain and the secret multiplexing gain are defined. Using these definitions, the secret 
diversity-multiplexing tradeoff (DMT) is calculated analytically for no transmitter side channel state information 
(CSI) and for full CSI. When there is no CSI at the transmitter, under the assumption of Gaussian codebooks, it is 
shown that the eavesdropper steals degrees of freedom from the source-destination channel, and the secret DMT 
depends on the remaining degrees of freedom. When CSI is available at the transmitter (CSIT), the eavesdropper 
steals transmitter antennas, but not the degrees of freedom of the source-destination channel. This dependence on 
the availability of CSI is unlike the DMT results without secrecy constraints, where the DMT remains the same for 
no CSI and full CSI at the transmitter under short term power constraints. A zero-forcing type scheme is shown 
to achieve the secret DMT when CSIT is available. 

Keywords: Diversity-multiplexing tradeoff, MIMO, secrecy, wire-tap channel. 

I. Introduction 

In wireless communications, messages are transmitted publicly. Any transmission can be overheard by 
nearby nodes. If illegitimate, passive listeners trying to understand messages, known as eavesdroppers, 
are present in the environment, then all confidential information such as user IDs, passwords, or credit 
card numbers become vulnerable and can be identified. In addition to voice, image, video, and data 
transmissions, future applications envision wireless transmission of sensitive information such as personal 
and locality information. Therefore, wireless security is an essential system requirement. 
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In current wireless systems, protection against eavesdropping is provided at higher layers of the Open 
Systems Interconnection (OSI) reference model. Transport, network or application layer protocols aim to 
prevent eavesdropping using encryption. However, cryptographic algorithms are highly complex and are 
not robust. Thus, enhancing the current encryption techniques with unconditional security protocols, which 
cannot be broken even with infinite computing power, are of utmost importance for future development 
of wireless applications. 

Physical layer security techniques provide unconditional secrecy through channel coding and comple- 
ment higher layer security methods. Information-theoretic security investigates the fundamental limits of 
secure communication at the physical layer. One of the building blocks of information-theoretic security is 
the wire-tap channel. The physically degraded wire-tap channel was introduced in [1] and the fundamental 
coding structure to obtain perfect secrecy was established. Later in [2], these results were extended to less 
noisy and more capable broadcast channels. The secrecy capacity for the Gaussian wire-tap channel was 
found in [3]. Recently fading wire-tap channels are investigated in [4], [5], for which the ergodic secrecy 
capacity is calculated when both the transmitter and the receivers have channel state information (CSI). 
In [4] the ergodic secrecy capacity, when the source node does not have the eavesdropper's CSI, is also 
evaluated. 

In wireless channels, multiple antennas increase robustness against fading, and also transmission rates. 
Multiple antennas are considered in the context of wire-tap channels in [6], [7]-[12]. In [7] the authors 
find the secrecy capacity of the Gaussian multiple-input multiple-output (MIMO) wire-tap channel, when 
the source and the destination have two antennas each and the eavesdropper has only a single antenna. 
Concurrent work in [8], [9] and [10] establish the secrecy capacity for the fading MIMO wire-tap channel 
under the full CSI assumption for arbitrary antenna numbers. 

Although the ergodic behavior of fading channels is very important, when there are stringent delay 
constraints, ergodic capacity is not realizable. In this case, the outage formulation proves to be useful. 
For the wire-tap channel, outage approach was first considered in [6] and [13]. Outage probability for a 
target secrecy rate is also investigated in [5], when the source, the destination and the eavesdropper have 
CSI, and optimal power allocation policies that minimize the outage probability are calculated. 

An important performance measure for MIMO fading channels that simultaneously considers probability 
of error and data rates is the diversity-multiplexing tradeoff (DMT), established in [14]. The DMT is a 
high SNR analysis and describes the fundamental tradeoff between the diversity gain and the multiplexing 
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gain. The diversity gain is the decay rate of the probability of error, and the multiplexing gain is the rate of 
increase of the transmission rate in the limit of high SNR. The DMT is strongly related to the probability 
of outage as probability of error is generally dominated by the outage event at high SNR. 

In this paper we investigate the multiple- antenna wire-tap channel from the DMT perspective. We 
define the secret multiplexing gain, the secret diversity gain and the secret DMT. We argue that the 
eavesdropper can be thought of as "stealing" degrees of freedom from the source-destination channel, and 
the secret DMT depends on the remaining degrees of freedom, when there is no CSIT This behavior is 
also observed in [15], [16] for compound channels only for the maximum multiplexing gain point. Our 
work can be thought of as a generalization of [15], [16], capturing the behavior for all diversity gains. 
We also argue that the secret DMT depends on the available CSI at the transmitter (CSIT). This is unlike 
the regular point-to-point DMT without security constraints, which is not affected from the transmitter 
CSI for constant-rate transmission. Under CSIT assumptions, we also suggest a zero-forcing type scheme, 
which achieves the secret DMT upper bounds. 

Next, we introduce the system model in Section [TT] and then state the secret DMT for no CSIT in 
Section [TlTJ Section [IV] covers the secret DMT when there is CSIT. We conclude in Section [Vj 

II. System Model and Preliminaries 

We consider a multiple-antenna wire-tap channel, in which the source, the destination and the eaves- 
dropper have m, n and k antennas respectively. Both the destination and the eavesdropper have CSI about 
their incoming channels. In Section [III] we assume the source node does not have any transmit CSI. We 
will consider the case when the source has transmitter CSI in Section [IVj 

For each channel use the channel is represented as follows: 

Y D = H D X + Z D (1) 
Y E = H E X + Z E . (2) 

In the above equations X is an m x 1 vector, which denotes the transmitted source signal. Yd and Y E 
are n x 1 and k x 1 vectors, and represent the received signals at the destination and the eavesdropper 
respectively. Similarly, Z E and Z E are n x 1, and k x 1 vectors that indicate the independent additive noise 
at the destination and the eavesdropper. Both Zd and Z E have independent and identically distributed 
(i.i.d.) complex Gaussian entries with zero mean and variance 1. The matrices H D and H E , consisting 



of i.i.d. complex Gaussian entries with zero mean and unit variance, are of size n x m, and k x m. 
They respectively denote the channel gains between the source and the destination and the source and the 
eavesdropper. 

When there is no secrecy constraint, the source fixes its transmission rate at and aims to transmit 
the message W, W e W = {1,2,...,2 NR(T) }, in N channel uses. The destination declares an error if 
its decision W 7^ W, W G W. This probability is shown to be dominated by the outage event, whose 
probability is given by 

P e {SNR)=P{R < R^Y, 

where R = J(X; Y D ) is the instantaneous mutual information corresponding to the chosen transmission 
scheme. The diversity and multiplexing gains, d and r, are respectively defined in [14] as 

log^SNR) = 

SNR^oo log SNR 

and 

i?( T )(SNR) 

hm = r. 

SNR->oo log SNR 

The optimum diversity-multiplexing tradeoff d(r) is the piecewise linear function joining the points 

d m , n (l) = (m - l){n - I), 

1 — 0,1, min{m, n}. The degrees of freedom in this system is min{m, n}, and the multiplexing gain 
r can increase up to this value. Each additional multiplexing gain costs the system a single degree of 
freedom, and the diversity gain decreases as the multiplexing gain increases. 

Under secrecy constraints, the rate-equivocation rate region [1] indicates the transmission rates over 
the main channel and the level of obscurity at the eavesdropper. A rate-equivocation rate pair (R, R s ) is 
achievable if there exists a sequence of (2^, N) codes with P(W 7^ W) — > 0, as N — > 00 and 

lim ±H(W\Y») > R s . 

N— >oo iv 

The equivocation rate R s describes the eavesdropper's confusion about the message W given its ob- 
servation Y£ . An operating point in the rate-equivocation rate region is called perfectly secure, if the 

'The expression /i(SNR)=/ 2 (SNR) is used to mean lim SN R^oo log /i (SNR)/ log SNR = lim SN R^oo log / 2 (SNR)/ log SNR. In the 
rest of the paper, inequalities are also defined similarly. 



equivocation rate R s is arbitrarily close to the information rate R. Moreover, the perfect secrecy rate 

R S = [I(X;Y D )-I(X;Y E )} + (3) 

is achievable [2] for any input distribution p(X), where x + denotes max{0,x}. The capacity-equivocation 
rate region, C, is the closure of the set of all achievable rate-equivocation pairs (R,R S ). The highest 
perfectly secure rate is called the secrecy capacity [1]. 

To briefly describe how we achieve the perfect secrecy rate in © for some input distribution p(X), 
we define A = 2 NR % B = 2 NI( -*< Y ^ and the sets A = {1, A} and B = {1, B}. The source forms 
AB = 2 ni ( x ' Yd ) channel codewords i.i.d. with p(X). In order to send a secret message a E A, 
the source chooses b uniformly from the set £>, forms w = (a, b) and maps w into a channel codeword 
X N . In other words for each secret message a, the source randomly chooses from one of the B dummy 
codewords to confuse the eavesdropper. As the total number of codewords in the source code book is 
equal to 2 7V/ ( X;Yl) ), the destination can reliably decode w and hence a. However, the eavesdropper can 
only decode the index b and has no information about the secret message a. Thus perfect secrecy can be 
achieved. 

In this work, we assume perfect secrecy, R = R s , and investigate the high SNR behavior of the secrecy 
probability of error with a target secrecy rate equal to i?F^(SNR). We assume the system is delay-limited 
and requires constant secrecy rate transmission. There is also short-term average power constraint mSNR 
that the transmitter has to satisfy for each codeword transmitted. We define the secret multiplexing gain 
as 

.. R { P (SNR) A 

hm = r s . 

SNR^oo log SNR 

The secret multiplexing gain r s shows how fast the target secrecy rate scales with increasing SNR. The 
secret diversity gain, d s , is equal to 

r logP e (SNR) A 
sn™oo log SNR " s ' 

where P e (SNR) denotes the probability of error under secrecy constraints. In this paper, we establish the 
tradeoff between secret diversity gain d s and the secret multiplexing gain r s , d s (r s ). 

In a system with secrecy constraints, the probability of error is due to two events: Either the destination 
does not receive the secret message reliably, or perfect secrecy is not achieved [17]. When the channel block 
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length- iV is long enough and good codes are used, probability of error is dominated by the corresponding 
outage events. Then we can write 



Pe(SNR) 



P (outage) 



P (perfect secrecy outage or main channel outage) 



< P (perfect secrecy outage) + P(main channel outage). 



(4) 



On the other hand, 



P e (SNR) > P (perfect secrecy outage). 



(5) 



In the following we will use these upper and lower bounds on probability of error to establish the secret 



Finally, note that we assume a single transmission block of N channel uses under short-term power 
constraint. This is unlike the scenario in [18], where there are many blocks to communicate and a long- 
term power constraint. In [18] the first communication block is merely used to generate a secret key, and 
in the next block this key is used to enhance secrecy, while another key is generated to be used in the 
following block. In our system, communication session lasts a single code block, during which secrecy 
has to be maintained. In other words, the transmitter and the receiver have to start secure communication 
immediately at the beginning of the transmission block. 



When there is no CSIT the MIMO wire-tap channel capacity is not known. However, motivated by 
the fact that when all nodes in the system have CSI, Gaussian codebooks are optimum, [8], [9], [10], we 
assume Gaussian codebooks. We also conjecture that sending independent signals at equal power at each 
antenna is optimal at high SNR, as all the entries of H D and H E respectively are identically distributed. 
As the source node does not have CSI, it has no preference over one direction over the other. Under 
these assumptions the input covariance matrix Q is a diagonal matrix Q = SNRI m , where I m indicates 



DMT. 



III. No Channel State Information at the Source 
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an identity matrix of size m. Then, we can write the achievable perfect secrecy rate in © as 



log 



log 



log 



I fc + UeQH^ 



nti (i + A * SNR ) 



(6) 



nr=i (i + ^snr) 

where L = min{m, n}, < Ai < ... < \l are the ordered eigenvalues of the matrix H^H^, < /xi < 
... < fi k are the ordered eigenvalues of the matrix H B Hg, and f denotes the conjugate transpose. 

Theorem 1: For the multiple-antenna wire-tap channel defined in © and ©, with full CSI at the 
destination and the eavesdropper about their incoming channel gains and no CSI at the source, if k < 
min{m, n}, the secret diversity-multiplexing tradeoff achieved by isotropic Gaussian codebook is a piece- 
wise linear function joining the points (7, d s (l)), where I — 0, 1, min{m, n} — k and 

d s {l) = (m — k — l)(n — k — I). 

If k > min{m, n}, then the secret diversity-multiplexing tradeoff reduces to the single point (0,0). 

Proof: To find the secret DMT we first find a lower bound and an upper bound on the probability of 
the secrecy rate outage; P(perfect secrecy outage) = P(R S < R^), where R^ = r s log SNR, and show 
that both of these bounds have the same DMT d m ^k,n-k(r s ). The details of these bounds are presented 
in Appendix U 

To attain perfect secrecy the source transmits at rate R^ = Rf + min{m, k} log SNR = (r s + 
min{m, k}) log SNR bits/channel use, where the target secret communication rate is Rs bits/channel 
use. Following the secrecy achievability scheme in [2], also outlined in Section HH the total number of 
codewords in the channel codebook is equal to 2 nrT , and the number of dummy codewords used for 
each secret message is fixed and equal to B = 2 Armm ^ m ' fe ^ logSNR . Then the main channel is in outage 
when the destination cannot decode rate R( T \ which has the probability 



P(main channel outage) 



(a) 



P(I(X;Y D )<R^) 

P (/(X; Y D ) < (r s + mm{m, k}) log SNR) 

gNR~ dm,n(r a +min{m,k}) 

SNR -d m - k , n - k (r s ) k<m 

if k > m 



(7) 
(8) 
(9) 

(10) 
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where (a) is due to [14]. 

Overall, if k < m the upper bound on the probability of error © becomes equal to 

P e (SNR) = SNR- d ™- k ^ k(rs) + SNR- d ™- fc '- fc{ra) 

As the lower bound on probability of error © is the same, we conclude that the secret DMT is equal to 
d m _ k:n _ k (r s ) if k < m. If k > m, the secret DMT is the single point (0, 0). ■ 

Theorem \T\ states that the eavesdropper costs the system min{m, k} degrees of freedom, which af- 
fects the whole secret DMT curve. When the degrees of freedom in the source-eavesdropper channel, 
min{m, k}, is equal to k, then the secret system becomes equivalent to an (m — k) x (n — k) system. 
However, if min{m, k} = m, then no degrees of freedom are left for the main channel, asm > min{m, n}, 
and the secret DMT reduces to the single point (0, 0). 

FigED shows an example secret DMT when there is no CSIT for the wire-tap channel, when the source, 
the destination and the eavesdropper have 3, 4, and 2 antennas respectively; m = 3, n = 4 and k = 2. We 
observe that for the secret channel only one degree of freedom is left, and the maximum secret diversity 
can be 2. The figure also compares the secret DMT to the 3x4 channel DMT without secrecy constraints. 
We can observe the effect of secrecy constraints not only on the degrees of freedom, but also on diversity, 
for all possible secret multiplexing gain values. 

IV. Channel State Information at the Source 

In the previous section secret DMT is established for MIMO wire-tap channels without CSIT. In this 
section we assume that transmitter has perfect CSI about the channel between itself and the eavesdropper, 
as well as its channel to the destination. While it may be possible for the source to obtain eavesdropper CSI 
if both the destination and the eavesdropper are part of the same network, the full CSIT assumption may 
be harder to justify if the eavesdropper is merely an illegitimate listener. Nevertheless, this assumption 
will help us understand the limitations and properties of secret DMT. Note that secret DMT is still a 
meaningful metric as we consider constant secret rate applications that operate under short-term power 
constraints, which can suffer from outage despite the available CSIT. 

In the next subsection we establish the secret DMT with CSIT and in Section IIV-BI we investigate 
different schemes that achieve the best secret DMT with CSIT. 



A. Secret DMT with CSIT 

The secrecy capacity for the non-fading MIMO wire-tap channel with channel knowledge both at the 
receivers (the destination and the eavesdropper) and the transmitter (the source) is found in [8], [9], [10] 

as 



C s = max log 

Q h o, 

Tr(Q) < mSNR 



log 



(11) 



To establish the secret DMT with CSIT, we first need the following lemma. 

Lemma 1: If k < min{m, n}, then p = dim{Null(H D )- L fl Null(H E )} > 0, where Null (Ho J 1 - is the 
orthogonal complement of the null space of H D and Null (He) is the null space of H E . If n < k < m 
or k > m, then p — 0. 

Proof: The subspaces Null (He) and NuI^Hb)- 1 are defined in the vector space 9ft m . If k < 
min{m, n}, then NuII(He) and Nul^Hc.) 1 - respectively have dimensions m — k and q = min{m, n}, 
and have the basis sets U = {u 1; u 2 , u m _ k } and W = {w 1; w 2 , w g }. In other words, the sets U and 
W are both linearly independent sets. However, asm — k + q > m, WUW is linearly dependent. The 
intersection of the hyper-planes U span and W span, includes at least one non-zero vector. Thus p > 0. 

If n < k < m, then the basis sets U and W are same as above with q = n. However, in this case 
WUWis a linearly independent set, asm — k + q = m — k + n < m. The intersection of the hyper-planes 
U span and W span only include {0} and thus p = 0. 

If k > m, then NullH^ consists of only {0}. Then NuI^Hd) 1 - n Null(H E ) = {0}, and thus p = 0. ■ 
Theorem 2: For the multiple-antenna wire-tap channel defined in (OQ) and ©, with full CSI at all the 
terminals, if k < m, the secret diversity-multiplexing tradeoff, d s (r s ) is a piecewise linear function joining 
the points (I, d s (l)), where I — 0, 1, m — k and 

d s (l) = { m -k-l){n-l). 

If k > m, then the secret diversity-multiplexing tradeoff reduces to the single point (0, 0). 

Proof: When the secrecy capacity is expressed as in (fTTT) . it is hard to calculate the secret DMT. 
We make use of the high SNR secrecy capacity approximations provided in [19], [9] to find the secret 
DMT. We investigate the three cases k < min{m, n}, n < k < m, and k > m separately. 

For the first case k < min{m, n}, p > by Lemma Q] and He is not full column rank; i.e. k < m, 
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then the secrecy capacity at high SNR is given by [19], [9] 



(7 S (SNR) = logoj + bg 

j:°j>l 



In + 



mSNR 
V 



HdH^Hl, 



(12) 



where o(l) — > when SNR — > oo, e (Qroxm - ls projection matrix onto Null(H^), and <jj, 
j = 1, min{m, n} — p, are the generalized singular values of matrices and H^. To find the secret 
DMT we investigate the perfect secrecy outage probability 



P (perfect secrecy outage) 



P I V bg (J, 2 + bg 



In H HoHbHd 



+ o(l) < r s log SNR 



P log 



In + 



mSNR 



V 

In H H^H^H^ 



P log 

k m 

iiii/hw)(^)^. 

»=i i=i 



< r s log SNR^ 

<r s logSNR|Hg 1) = ^ 11) , 



(13) 
(14) 

(15) 



ttW 

•) 1 1 E 



H 



(km) 



(ij) 
E 



(16) 



For a fixed H E = H E , i.e. when all Hp 



H 



(ij) 



k,j 



m, the projection matrix 



can be written as = AA*. The matrix A is of size m x (m — k). We can write A = [a 1; a 



m—k\ 



where the length-m column vectors a, form an orthonormal basis for Null (He). Let Hb = [r 



-tit 



1; ••) 1 nJ 



be written in terms of length-m row vectors r it i = 1, ...,n. Then each entry of (HpA)^ = (r^Oj), 
i = I, ...,n, j = 1, (m — fc). The mean value of each entry is equal to E{{ri, aj)} = 0. We observe 
that the covariance £?{(a],r|)(r s , a t )} = a]i?{rjr s }a 4 . The value £7{rjr s } = 1, if z = s, and it is zero if 
i ^ s. In addition to these, as the vectors are orthonormal, a^E{Y\r s }a t — 0, if j ^ t for any z and s. 
Therefore, if i = s and j = t, then E{(aJj, r|)(r a , a t )} = 1; otherwise, it is equal to zero. Thus, HpA 
is a matrix, whose entries are i.i.d. Gaussian with zero mean and unit variance. Then we can write the 
probability in (TT6l) as 



P lo 



I, 



mSNR 
P 



< r s logSNR|H 



(ii) 

E 



P lo 



In + 



rr(ll) Tr(fcm) 

mSNR 



uikm) 
E 



H D AA f H 



V 



v 



< r s log SNR 



SNR" d(m * t) '"' rs '. 



In other words, this system is equivalent to an (m — k) x n MIMO with a well known DMT di m -k),n{ r s) 
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[14]. Substituting this value in (fT6l) , we observe that 
P (perfect secrecy outage) = 



km, 

— ^ — rr TT TT /«(«) {H K E 3, )dH™ 

i=i j=i 



g^J^~ a! (m-fc),n(»"s) 



To attain perfect secrecy the source uses i.i.d. complex Gaussian codewords with covariance matrix 



Q and transmits at rate = Rg + log 



bits/channel use, where Q is the covariance 



i k + u e quI 

matrix that attains the maximum in (ITTb . Here the target secret communication rate is R^ bits/channel 
use. Unlike the no CSIT case, the number of dummy codewords used for each secret message is variable 
and equal to B = 2 Ariog l Ifc+HE<9H jel. Then the main channel outage probability is equal to 



P(main channel outage) = P (log I n + HdQH^ < P (T) 

= P (log 1 I„ + H D QH^ | - log | I fe + HeQHe I < r. log SNR 
= P (perfect secrecy outage) 



Combining the upper and lower bounds © and © we conclude that the secret DMT is equal to d m _ fc n (r s ) 

if k < m. 

For the second case n < k < m, p = 0by Lemma \T\ and the high SNR secrecy capacity expression of 
[9] cannot be used directly. However, the converse and achievability in [9] can be extended to cover for 
p = 0, by deleting certain rows and columns in the generalized singular value decomposition [20]. Then the 
same secrecy capacity expression as in (TT2l) holds with p replaced by p' = min{m — k,n}. We can follow 
the same steps in the previous case to calculate P(perfect secrecy outage), and P(main channel outage) 
and find the secret DMT to be d( m -k),n( r s) f° r n < k < m. 

Finally for the last case, k > m, the secrecy capacity at high SNR is given by [19], [9] 



lim (7,5 (SNR) = V logc^. 

j-o-j>l 



SNR^oo 



(17) 



As the capacity expression does not grow with increasing SNR, it is easy to see that the secret DMT is 
a single point (0,0). ■ 
In Fig. CD secret DMT with CSIT is shown for m = 3, n = 4 and k = 2 in comparison to the secret 
DMT without CSIT and the DMT without secrecy constraints. The DMT without secrecy constraints, the 
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secret DMT with CSIT and the secret DMT without CSIT are shown to be respectively equal to d 3 ^(r), 
d\,4_{r s ), and rf 12 (r s ). In this example secrecy constraints impose both multiplexing gain and diversity 
gain losses whether CSIT exists or not. 

On the other hand, if CSIT is available, secrecy constraints do not always result in multiplexing gain 
loss with respect to the DMT without secrecy constraints. This is illustrated in Fig. [2] for which the source, 
the destination and the eavesdropper respectively have 4, 2 and 1 antennas each. In this case, the secret 
DMT with full CSIT is equal to d 3)2 (r s ), r s e [0,2], whereas the secret DMT with no CSIT is equal to 
^3,1 ( r 's), r s E [0, 1]. Note that the secret DMT with no CSIT always experiences a degrees of freedom loss, 
whereas secret DMT with full CSIT only experiences secret diversity gain loss but not secret multiplexing 
gain loss, if m — k > n. 

In Fig. [3] we compare the secret DMT for the wire-tap channel with a 2-antenna source, a 2-antenna 
destination, and a single antenna eavesdropper for no transmitter CSI and full CSI cases, as well as 
the DMT without secrecy constraints. The DMT without secrecy constraints is known to be ^2,2(^)5 and 
according to Theorems \T\ and |2l the secret DMT with no transmitter CSI and full CSI are equal to 1 — r s 
and 2(1 — r s ) respectively. In Fig. @] we compare secrecy outage probability for the same antenna numbers 
m = 2, n = 2 and k = 1. The secret multiplexing gain is assumed to be equal to 0.75; thus the secret 
diversity levels are equal to 0.25, if there is no CSIT, and 0.5 if CSIT is available. Fig. |4] confirms these 
results, from which we can observe the secret diversity to be approximately equal to the predicted values. 

B. Alternative Achievability Schemes 

In this section we propose a new secret DMT optimal scheme as an alternative to the capacity achieving 
strategy studied in Theorem |2l and compare it to the artificial noise scheme of [21]. 

1 ) Zero-forcing: Here we suggest a simple zero-forcing method that achieves the full CSIT secret DMT. 
As k > m results in a trivial secret DMT, we assume k < m; i.e. He is not full column rank. In the 
zero-forcing protocol we transmit the secret information in U, which is a length- (m — k) column vector, 
and send X = AU at the transmitter, where = AAt Then the received signals at the destination and 
the eavesdropper respectively become 

Y D = H D AU + Z D , 
Y E = H E AU + Z E 

= z E . 
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Stated differently, the destination observes an equivalent channel of H^A, whereas the eavesdropper 
only observes noise because the secret message is transmitted in its null space. As the receiver knows 
the transmit strategy, it is also informed about A and thus about the equivalent channel. Then for every 
realization of A, the equivalent channel gain matrix still has i.i.d. complex Gaussian entries with zero 
mean and unit variance. Assuming the covariance matrix of U is mSNRI m _fc/(m — k), the achievable 
perfect secrecy rate (fTTT) becomes 



I(X;Y D ) = /(U;Y D )=log 



I, 



H D HiH f D ^— SNR 

m — k 



as /(X; Ye) = 0. For this equivalent channel the DMT can easily be shown to be d m _k,n(r s ) as in 

Note that for MIMO channels the source node can do beamforming in the direction of the destination, 
if CSI is available at the transmitter. Whether a secrecy constraint exists or not, beamforming in the 
direction of the destination only adds coding gain to the achievable mutual information /(X; Y fl ) or 
log I n + HdQH d term in (fTTT) and does not change the DMT [14] or the secret DMT. However, when 
there are secrecy constraints, the transmitter CSI can be used to control the beam direction of the message. 
With this information, when the message is transmitted in the null space of the eavesdropper, the secret 
DMT changes significantly as illustrated in the zero-forcing protocol. 

2) Artificial Noise: In [21] the authors suggest an artificial noise scheme to increase achievable secrecy 
rates. In the artificial noise scheme the source node sends its messages in the range space of H D and sends 
extra noise in H D 's null space. Let T be an m x (m — n) matrix, whose columns form an orthonormal 
basis for NullHo, V is a length- (m — n) column vector with i.i.d. complex Gaussian entries with zero 
mean, and S be a length-m column vector that carries source messages. Then source sends 



X = S + TV. 



As V is received in the null space of Ho, the destination is not affected from this extra noise V, but the 
eavesdropper is. Then the received signals at the destination and the eavesdropper are 



Yd = H^S + Zd 

Y e = H^S + H^TV + Zs. 



14 



Assuming the covariance matrix for S and V are respectively SNRI m /2 and mSNRI OT _ n /[2(m — n)}, the 
achievable perfect secrecy © becomes equal to 



R s = log 



In H ^-HflHj) 



- log 



K + ^HsHjs 



IKI 



where K = I k + ^^U E TT^H. F . 

K 2(m—n) a Hj 

Simulations suggest that the artificial noise scheme also achieves the secret DMT d( m -k),n{fs)- A 
comparison between zero-forcing and artificial noise protocols is shown in Fig. [5] when the source has 
2 antennas and the destination and the eavesdropper respectively have a single antenna each. The figure 
confirms that both schemes achieve a secret diversity 0.25, when the secret multiplexing gain is 0.75. 

As a final note, the artificial noise scheme only necessitates the eavesdropper's instantaneous mutual 
information, /(X; Yg), to determine the codebook structure; i.e. the sizes of the secret message set and 
the dummy codeword set. However, it does not necessitate the instantaneous channel gain matrix, H E . To 
do zero-forcing the instantaneous channel gain matrix is required but its outage probability performance is 
superior to artificial noise. In zero-forcing the source concentrates its power in the null space of and 
it is guaranteed that the eavesdropper does not get any information. Thus, an advantage of zero forcing 
is that the source does not have to employ a secret codebook and send dummy information. 

V. Conclusion 

In this paper we study the MIMO wire-tap channel when there are stringent delay constraints and 
short-term power constraint. We define and find the secret DMT for arbitrary number of antennas at the 
source, the destination and the eavesdropper. First, we study no CSIT case. Our results show that the 
eavesdropper decreases the degrees of freedom in the direct link, min{m, n}, by the degrees of freedom 
in the source-eavesdropper channel, min{m, k}. The secret DMT depends on the remaining degrees of 
freedom. Therefore, if k > m, then no degrees of freedom is left for secure communication. Otherwise, the 
secret DMT is equivalent to that of a (m — k) x {n — k) MIMO without secrecy constraints. Then we study 
the effect of transmitter CSI on secret DMT. We observe that unlike the DMT without secrecy constraints, 
the transmitter CSI changes the secret DMT and it becomes equivalent to the DMT of a (m— k) x n MIMO 
if k < m; otherwise no tradeoff exists between secret multiplexing and secret diversity. We also suggest 
a zero-forcing scheme, which achieves the secret DMT bound when CSIT is available, and compare it to 
the artificial noise scheme. 
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Appendix I 

Perfect Secrecy Outage Probability, No CSIT 

In Theorem \T\ we need the probability of perfect secrecy rate outage. In this appendix, we first compute 
this probability for k < min{m, n}. We will discuss the case k > min{m, n} at the end of the proof. 

Secrecy Outage Lower Bound: Define £\ = {fii > a, i = 1, k}, where a is a positive real constant 
and £f denotes the complement of £ t . Without loss of generality a > 1. Then we can write probability 
of secrecy rate outage as 

P (perfect secrecy outage) 
= P(perfect secrecy outage |£;)P(<^) + P (perfect secrecy outage|<^ c )P(£ ; c ) (18) 
> P (perfect secrecy outage \£{)P(£i). (19) 

As a is a constant, we find P(£i) is also equal to a constant. At high SNR 

P (perfect secrecy outage |£z) 
= pfnt.d + A.SNR) 

5 pfnt 1 (l + A,SNR) <SNR , 
\ (1 + aSNR) fe 

> P ifl (! + A»SNR) < SNR rs+fc 
\i=i 

(c) 

(d) 

= gNf{_ _d »"-fc,i-fc( T ' s ) 

where using the definition of £i we substituted the minimum value for all [ii in (|20l) to obtain (a), (b) 
follows because (1 + aSNR) fc > SNR fc . Using the DMT results without secrecy constraints [14], (c) and 
(d) follow. As P(perfect secrecy outage)=SNR~ ds(rs ' ) , we conclude that d s (r s ) is upper bounded with the 
DMT of an (m - k) x (n - k) MIMO system. 

Secrecy Outage Upper Bound: To make the upper bound tight, we need a piecewise analysis, which 
depends on the secret multiplexing gain. We define q as 



Cj = — (m + n — 2k — 2i — l)r s + (m — k)(n — k) — iii + 1), 
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for i — 0, 1, min{m, n} — k — 1. We also define the event £ U)i = > QlogSNR}, and £° { as the 
complement of £ u i . 
For any i, we can write 

P (perfect secrecy outage) 
= P (perfect secrecy outage|£ U)i )P(£ U) j) + P (perfect secrecy outage|£° jP(££ J 
< P{£ u ,i) + P(perfect secrecy outage |££J, (21) 

where we have upper bounded both P(perfect secrecy outage |£ U)i ) and P(£°J with 1. 

To calculate an upper bound on the first term in (|2TI) . we use an upper bound on the probability density 
function (pdf) of /i^. We obtain this bound using the joint pdf of the ordered eigenvalues < fix < /i 2 < 
... < /i fc of the matrix H S H^ [14, Lemma 3], which is 

k 

i=l i<j 



where i£m jn is a normalizing constant. Then, 

p(/4fc) 



J ... I p(fii, ...Hk)d/j,i...dn k - 1 
Jo Jo 



k-1 



• / •••/ n^" fc n^-Mi) 2 e-^« 

70 Jo i=l i<j 

dp,x-^k-i 

• / - / n^" fc e" Eiiw ^i--.^*-i 
7o Jo i=1 



(22) 

(/) 

< ^>rVf" 1) e- ft [( m -fc)!] fc - 1 (23) 
where (e) is because each (/^ — /ij) 2 < and there are k(k — l)/2 many (/ij — // 3 ) 2 terms involved. 
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Before we write (/) we first bound the innermost integral in (1221) as 



/'2 



j(m -k + l,fi 2 ) 



(</) 



(m — k)\ 
< (m — k)\, 



"M2 



where 7(., .) is the lower incomplete gamma function. Note that for (g) we used the series expansion 
of this function [22]. Applying this result repeatedly to all the integrals in ([221) leads to (/). Using this 
upper bound on the pdf of the largest eigenvalue // fe , we can now find an upper bound on P(£ Uti ). Let 
Ci = Ci log SNR for short hand notation. Then, 



c, 



(h) r°° 

C[( m - _1 r(m - 2k + k 2 + 1, d] 



(0 



Ci 



(24) 
(25) 



where we used (|23l) to obtain (/i). In ((24)) r(., .) denotes the upper incomplete Gamma function, and we 
used the series expansion of this function to obtain (i) [22]. Then, it is easy to show that 



P(£ u ,i) < SNR" 



(26) 



as the e Ci term in (1231 ) determines the high SNR behavior of (1231) . 
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For the second term in (|2TT) we show that 



P (perfect secrecy outage] J 
= pfnt.d + A.SNR)^ 

Vnt,(l + ^SNR) 
« J nt.d + A.SNR) 

\(l + (cj logSNR)SNR) 

« /a 

< P \[[ (1 + AjSNR) 
\i=i 



< (2 max{l, Q}) fc (log SNR) fc SNR rs+fc ) 

(0 /A 

< P JJ (1 + AjSNR) < A fc (log SNR) fc SNR rs+fc 
\i=i 

(m) 

= SNR~ d ( m -' c ''( n - fc ' (T ' s) . (27) 

In the above inequalities, (j) is because the largest eigenvalue pik and hence all /ij's are upper bounded 
by CjlogSNR given £° im (k) is due to the fact that 

1 + (cj logSNR)SNR < 2 max{l, Ci } (log SNR)SNR, 

and (I) follows because q < (m — k)(n — k), for all i = 1, ...,min{m, n} — A; — 1, and we define 
A = 2max{l, (m — k)(n — k)}. Finally, (m) is because A k (\og SNR) fe SNR rs+fc has the same multiplexing 
gain as SNR ra+fc , and thus the results in [14] apply. 

Overall, substituting (l26l) and (|T7l) into (|2TI) . using the definition of q, and combining the results for 
all % we have 

P(perfect secrecy outage) < SNR" d ( m ~ fc )'(™- fc ' (rs) . 

We can observe that this upper bound on probability of secrecy rate outage is the same as the lower 
bound we calculated above. We conclude that P(perfect secrecy outage) =SNR" ds(rs) = SNR - ^" 1 -^ ^-*)^ 
and the secret multiplexing gain satisfies r s < min{m, n} — k for k < min{m, n}. 

If k > min{m, n}, then P(perfect secrecy outage|£/) in (TT9b takes a constant value and does not decay 
with SNR. As P(£{) is also equal to a constant, P(perfect secrecy outage) is lower bounded by a fixed 
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value in (0, 1]. Thus, we conclude that when k > min{m, n), the secret DMT reduces to the single point 

(0,0). 
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multiplexing gaii 



Fig. 1. The source, the destination and the eavesdropper respectively have 3, 4 and 2 antennas. The DMT with no secrecy constraints, 
secret DMT with transmitter and receiver CSI and, secret DMT with receiver CSI only are shown. 




Fig. 2. The source, the destination and the eavesdropper respectively have 4, 2 and 1 antennas. The DMT with no secrecy constraints, 
secret DMT with transmitter and receiver CSI and, secret DMT with receiver CSI only are shown. 
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Fig. 3. The source, the destination and the eavesdropper respectively have 2, 2 and 1 antennas. The DMT with no secrecy constraints, 
secret DMT with transmitter and receiver CSI and, secret DMT with receiver CSI only are shown. 




5 -e-no CSIT 

10 20 30 40 50 60 

total SNR (dB) 



Fig. 4. The source, the destination and the eavesdropper respectively have 2, 2 and 1 antennas, r s = 0.75. 
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Fig. 5. The source has 2 antennas, and the destination and the eavesdropper each have a single antenna, r s = 0.75. 



